Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/323830343a333137633a3a2f33322d3438203d3e20323635303138.roa
File:                     323830343a333137633a3a2f33322d3438203d3e20323635303138.roa (raw, json)
Hash identifier:          IgVKtp6GyzYgkDPkmpM3BvrCk7QK5Z6dS2SJvX24rp8=
Subject key identifier:   92:42:58:0F:D9:BD:CE:AC:EF:8B:43:EF:FB:88:57:F6:F5:F6:AE:97
Certificate issuer:       /CN=514A50B19852F6D708C89D381E43814F905B4853
Certificate serial:       577BCC9B795923602D232A874A687D81A3568F08
Authority key identifier: 51:4A:50:B1:98:52:F6:D7:08:C8:9D:38:1E:43:81:4F:90:5B:48:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A50B19852F6D708C89D381E43814F905B4853.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/323830343a333137633a3a2f33322d3438203d3e20323635303138.roa
Signing time:             Fri 06 Oct 2023 21:21:03 +0000
ROA not before:           Fri 06 Oct 2023 21:16:03 +0000
ROA not after:            Fri 04 Oct 2024 21:21:03 +0000
asID:                     265018
IP address blocks:        2804:317c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7b:cc:9b:79:59:23:60:2d:23:2a:87:4a:68:7d:81:a3:56:8f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A50B19852F6D708C89D381E43814F905B4853
        Validity
            Not Before: Oct  6 21:16:03 2023 GMT
            Not After : Oct  4 21:21:03 2024 GMT
        Subject: CN=9242580FD9BDCEACEF8B43EFFB8857F6F5F6AE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:f3:0e:95:b3:30:07:6c:c4:1f:f3:ac:bf:
                    05:9f:0a:4d:76:61:67:2a:ab:f8:49:9d:ee:bc:1a:
                    63:d8:d2:09:35:50:7a:b6:b0:9b:6e:d8:77:1d:0e:
                    bd:f9:58:99:ed:6e:b0:31:2c:0b:b6:0e:ac:b4:0e:
                    1c:36:03:66:ca:85:55:d9:9b:a4:5a:e0:43:63:44:
                    b9:ca:3f:eb:83:07:b2:54:18:56:54:81:7e:fe:fd:
                    2e:72:7f:6a:64:62:fe:2a:37:e1:40:a8:de:fe:ba:
                    94:77:c0:89:70:49:48:a6:14:0b:1c:93:ed:e7:cf:
                    95:60:2d:bb:4c:8d:8d:25:39:6e:9e:fc:f2:5f:7c:
                    8f:d4:26:8e:33:ca:08:66:5c:1b:4b:3c:e4:5b:e6:
                    c3:8c:05:29:4c:6e:f5:8c:07:be:46:11:4e:c4:10:
                    a6:fc:53:0c:7f:d3:c9:6c:2f:2d:63:17:1b:f0:86:
                    41:70:c3:c7:6b:41:f2:b7:ef:b6:64:0b:82:5a:ac:
                    d9:10:16:d4:b6:f8:29:85:85:6d:8f:08:59:cb:35:
                    94:26:6e:40:72:e4:66:37:2b:f0:16:a0:07:69:57:
                    62:12:53:2b:73:8c:52:76:6d:2c:0d:d4:d3:c4:47:
                    63:cc:1d:28:1a:68:4c:81:48:a1:19:57:6a:2a:ed:
                    a1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:42:58:0F:D9:BD:CE:AC:EF:8B:43:EF:FB:88:57:F6:F5:F6:AE:97
            X509v3 Authority Key Identifier:
                keyid:51:4A:50:B1:98:52:F6:D7:08:C8:9D:38:1E:43:81:4F:90:5B:48:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/514A50B19852F6D708C89D381E43814F905B4853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A50B19852F6D708C89D381E43814F905B4853.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/323830343a333137633a3a2f33322d3438203d3e20323635303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:317c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:74:7d:29:74:eb:70:6a:9f:01:91:ee:cb:94:a3:d7:d9:87:
         57:dd:db:2d:44:d6:7b:d0:b0:39:af:2b:2f:0e:10:8f:55:36:
         b5:7e:7a:24:5d:65:70:b1:38:bd:9a:14:6d:1e:70:ef:42:7e:
         7f:a2:e3:a6:d9:13:0e:cf:59:d7:08:09:18:b2:09:84:95:36:
         d7:04:b2:0f:e4:47:42:0a:0e:28:9a:dd:0b:2f:79:8e:e0:0b:
         07:b8:e2:6d:3e:fd:26:61:1a:e8:45:84:4d:3d:b4:3c:88:cb:
         8a:fb:15:8e:66:2f:8f:82:35:cd:45:f2:2a:19:de:8b:d6:3b:
         49:33:ae:26:d4:09:ff:63:d0:db:fb:15:36:01:4f:20:f9:44:
         b5:08:44:27:45:dc:7a:c4:fe:79:8b:fa:6c:d5:ab:ce:a0:8c:
         d1:5d:4a:f9:28:09:4e:08:78:b4:16:04:45:df:53:2c:06:88:
         1d:80:b2:18:98:bb:08:ba:3e:8f:8a:eb:83:cb:2e:26:2f:cb:
         00:cb:1a:6c:9c:65:53:6b:b3:5b:18:f6:41:ed:68:f8:10:f7:
         88:35:d5:0c:d1:29:5f:91:27:11:4e:db:32:45:49:71:7f:d2:
         ae:1c:c9:64:85:0f:8e:ab:2b:ce:0e:e2:ab:9b:72:6a:39:7a:
         65:09:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 06:33:54 2024 by rpki-client on console-fra.rpki-client.org